Privacy Policy

1. Information We Collect

We collect the following information to provide and improve our service:

• IP addresses for rate limiting and security purposes
• Steam AppIDs you search for and download
• Account information when you register (username, email)
• Usage statistics and activity logs
• Browser information and device details

2. How We Use Your Information

We use the collected information to:

• Provide and maintain our service
• Implement rate limiting and prevent abuse
• Track download statistics and user activity
• Improve our service and user experience
• Communicate with you about your account or service updates
• Comply with legal obligations

3. Data Storage

We store your data in a PostgreSQL database. Most activity data is retained for 30 days, while account information is stored as long as your account remains active. You can request deletion of your data at any time.

4. Cookies and Authentication

We use cookies for authentication, session management, and rate limiting. We also use NextAuth.js for secure authentication. These cookies are essential for the functionality of our service.

5. Third-Party Services

We interact with the following third-party services:

• Steam API - to fetch game information and manifests
• Discord - for authentication and support
• reCAPTCHA - to prevent automated abuse

We do not sell or share your personal information with third parties for marketing purposes.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability
• Withdraw consent at any time

7. Security

We implement appropriate security measures to protect your data, including encryption, secure authentication, and regular security assessments. However, no method of transmission over the internet is 100% secure.

8. Changes to Privacy Policy

We may update this privacy policy from time to time. We will notify users of any significant changes through our website or Discord server.

9. Contact

For privacy-related questions or to exercise your data rights, please contact us through our Discord server or email us at privacy@ghostdepots.com.